Re: Rule writing query

2008-04-16 Thread Benny Pedersen
On Wed, April 16, 2008 16:16, Theo Van Dinter wrote: > On Wed, Apr 16, 2008 at 04:11:25PM +0200, Benny Pedersen wrote: >> > header MG_LINK2 Content-Disposition =~ /filename\=\"as\.zip\"/ >> header MG_LINK2 Content-Disposition =~ /^filename\=\"[a-z]{2}\.zip\"/i > If you're trying to match the filen

Re: Rule writing query

2008-04-16 Thread Theo Van Dinter
On Wed, Apr 16, 2008 at 04:11:25PM +0200, Benny Pedersen wrote: > > header MG_LINK2 Content-Disposition =~ /filename\=\"as\.zip\"/ > > header MG_LINK2 Content-Disposition =~ /^filename\=\"[a-z]{2}\.zip\"/i If you're trying to match the filename in an attachment, "header" isn't going to get you an

Re: Rule writing query

2008-04-16 Thread Benny Pedersen
On Fri, March 21, 2008 20:46, Theo Van Dinter wrote: > Generally speaking, blocking that stuff in the MTA is the right/better way to > go. if body is 100M then you accept it before you can test for it :( Benny Pedersen Need more webspace ? http://www.servage.net/?coupon=cust37098

Re: Rule writing query

2008-04-16 Thread Benny Pedersen
On Fri, March 21, 2008 18:41, Martin Gregorie wrote: > header MG_LINK2 Content-Disposition =~ /filename\=\"as\.zip\"/ header MG_LINK2 Content-Disposition =~ /^filename\=\"[a-z]{2}\.zip\"/i Benny Pedersen Need more webspace ? http://www.servage.net/?coupon=cust37098

Re: Rule writing query

2008-03-21 Thread Martin Gregorie
On Fri, 2008-03-21 at 18:46, Theo Van Dinter wrote: > Look at the MIMEHeader plugin. > Thanks. That's what I needed to know. Martin

Re: Rule writing query

2008-03-21 Thread Theo Van Dinter
On Fri, Mar 21, 2008 at 09:56:17AM -0700, John Hardin wrote: > >header MG_LINK2 Content-Disposition =~ /filename\=\"as\.zip\"/ > > I sincerely doubt SA treats MIME body part headers as message headers, > though I would be pleasantly surprised to hear otherwise. > > Try a rawbody rule. MIME head

Re: Rule writing query

2008-03-21 Thread Martin Gregorie
On Fri, 2008-03-21 at 16:56, John Hardin wrote: > On Fri, 21 Mar 2008, Martin Gregorie wrote: > > > header MG_LINK2 Content-Disposition =~ /filename\=\"as\.zip\"/ > > I sincerely doubt SA treats MIME body part headers as message headers, > though I would be pleasantly surprised to hear otherwise

Re: Rule writing query

2008-03-21 Thread John Hardin
On Fri, 21 Mar 2008, Martin Gregorie wrote: header MG_LINK2 Content-Disposition =~ /filename\=\"as\.zip\"/ I sincerely doubt SA treats MIME body part headers as message headers, though I would be pleasantly surprised to hear otherwise. Try a rawbody rule. -- John Hardin KA7OHZ

Rule writing query

2008-03-21 Thread Martin Gregorie
I want to write a rule that can match file names for attachments that always have one or two lower case characters and a lower case .zip extension, i.e. the file name in this line: Content-Disposition: attachment; filename="as.zip" I've tried using the following regex in "body" and "rawbody" rul